Overview

overview

9

Static

static

3

QUOTATION_...DF.scr

windows7-x64

9

QUOTATION_...DF.scr

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QUOTATION_AUGQTRA071244úPDF.scr

  • Size

    1.7MB

  • Sample

    240807-n82n3sydjn

  • MD5

    ebeb3ff69fd4c1c6682d8478d493f2a6

  • SHA1

    a0dd90ccef14475617053628ed4424e651154e2f

  • SHA256

    c2548e72335c20d634c9015b4109fdf0adf0f8c4498dea42d44094ba89b1b129

  • SHA512

    6f535d11eefd12f8403843f3a95df5d288e8ed6b25b3fb6b365c2a711012b7e031d8a709453bc1128075d131b6d9276bc45c5f1fb82765306fc9b702be62e6f3

  • SSDEEP

    24576:x216rUYI9tdxRUPqI67U8UGvfx1c053k+ytiON0OW51eRYFCc7VhXlWCK:vUzsx4U8UGxCk0niOxWyRGX8F

Score
9/10
collectioncredential_accessdiscoverystealer

Malware Config

Targets

    • Target

      QUOTATION_AUGQTRA071244úPDF.scr

    • Size

      1.7MB

    • MD5

      ebeb3ff69fd4c1c6682d8478d493f2a6

    • SHA1

      a0dd90ccef14475617053628ed4424e651154e2f

    • SHA256

      c2548e72335c20d634c9015b4109fdf0adf0f8c4498dea42d44094ba89b1b129

    • SHA512

      6f535d11eefd12f8403843f3a95df5d288e8ed6b25b3fb6b365c2a711012b7e031d8a709453bc1128075d131b6d9276bc45c5f1fb82765306fc9b702be62e6f3

    • SSDEEP

      24576:x216rUYI9tdxRUPqI67U8UGvfx1c053k+ytiON0OW51eRYFCc7VhXlWCK:vUzsx4U8UGxCk0niOxWyRGX8F

    Score
    9/10
    collectioncredential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks